Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.9.3 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.9.3 stable release shall be
applied:
iio: common: st_sensors: fix channel data parsing
iio: max44000: correct value in illuminance_integration_time_available
iio: bmi160: Fix time needed to sleep after command execution
staging: octeon: Call SET_NETDEV_DEV()
ALSA: hda - Fix up GPIO for ASUS ROG Ranger
ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
ALSA: usb-audio: Fix irq/process data synchronization
fscrypt: fix renaming and linking special files
parisc: Add line-break when printing segfault info
parisc: Mark cr16 clocksource unstable on SMP systems
HID: sensor-hub: Move the memset to sensor_hub_get_feature()
ARM: davinci: da850: don't add emac clock to lookup table twice
pinctrl/amd: Set the level based on ACPI tables
mac80211: initialize fast-xmit 'info' later
asm-prototypes: Clear any CPP defines before declaring the functions
gcc-plugins: update gcc-common.h for gcc-7
drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
drm/i915: Fix oops in overlay due to frontbuffer tracking
drm/i915: Force VDD off on the new power seqeuencer before starting to use it
drm/i915: Initialize overlay->last_flip properly
KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
KVM: MIPS: Don't clobber CP0_Status.UX
KVM: MIPS: Flush KVM entry code from icache globally
usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
usb: musb: dsps: implement clear_ep_rxintr() callback
usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
usb: gadgetfs: restrict upper bound on device configuration size
USB: gadgetfs: fix unbounded memory allocation bug
USB: gadgetfs: fix use-after-free bug
USB: gadgetfs: fix checks of wTotalLength in config descriptors
USB: fix problems with duplicate endpoint addresses
USB: dummy-hcd: fix bug in stop_activity (handle ep0)
usb: gadget: composite: Test get_alt() presence instead of set_alt()
usb: dwc3: core: avoid Overflow events
usb: xhci: fix possible wild pointer
usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
xhci: free xhci virtual devices with leaf nodes first
usb: xhci: fix return value of xhci_setup_device()
usb: host: xhci: Fix possible wild pointer when handling abort command
xhci: Handle command completion and timeout race
usb: xhci: hold lock over xhci_abort_cmd_ring()
usb: return error code when platform_get_irq fails
USB: serial: omninet: fix NULL-derefs at open and disconnect
USB: serial: quatech2: fix sleep-while-atomic in close
USB: serial: pl2303: fix NULL-deref at open
USB: serial: keyspan_pda: verify endpoints at probe
USB: serial: spcp8x5: fix NULL-deref at open
USB: serial: io_ti: fix NULL-deref at open
USB: serial: io_ti: fix another NULL-deref at open
USB: serial: io_ti: fix I/O after disconnect
USB: serial: iuu_phoenix: fix NULL-deref at open
USB: serial: garmin_gps: fix memory leak on failed URB submit
USB: serial: ti_usb_3410_5052: fix NULL-deref at open
USB: serial: io_edgeport: fix NULL-deref at open
USB: serial: oti6858: fix NULL-deref at open
USB: serial: cyberjack: fix NULL-deref at open
USB: serial: kobil_sct: fix NULL-deref in write
USB: serial: mos7840: fix NULL-deref at open
USB: serial: mos7720: fix NULL-deref at open
USB: serial: mos7720: fix use-after-free on probe errors
USB: serial: mos7720: fix parport use-after-free on probe errors
USB: serial: mos7720: fix parallel probe
usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
xhci: Use delayed_work instead of timer for command timeout
xhci: Fix race related to abort operation
usb: dwc3: pci: add Intel Gemini Lake PCI ID
usb: dwc3: pci: Fix dr_mode misspelling
usb: dwc3: gadget: Fix full speed mode
usb: musb: Fix trying to free already-free IRQ 4
usb: hub: Move hub_port_disable() to fix warning if PM is disabled
usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
USB: serial: kl5kusb105: abort on open exception path
usb: gadget: Fix second argument of percpu_ida_alloc()
usb: gadget: fix request length error for isoc transfer
ARM: dts: r8a7794: Correct hsusb parent clock
USB: phy: am335x-control: fix device and of_node leaks
arm64: dts: hip06: Correct hardware pin number of usb node
ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support
dibusb: fix possible memory leak in dibusb_rc_query()
USB: serial: io_ti: bind to interface after fw download
mei: fix parameter rename KDoc
mei: bus: fix mei_cldev_enable KDoc
mei: move write cb to completion on credentials failures
staging: iio: ad7606: fix improper setting of oversampling pins
iio: accel: st_accel: fix LIS3LV02 reading and scaling
usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
usb: dwc3: gadget: always unmap EP0 requests
drm/i915/dp: add lane_count check in intel_dp_check_link_status
drm/i915: tune down the fast link training vs boot fail
mac80211: fix tid_agg_rx NULL dereference
nl80211: Use different attrs for BSSID and random MAC addr in scan req
ath10k: fix failure to send NULL func frame for 10.4
mfd: tps65217: Fix page fault on unloading modules
ath10k: use the right length of "background"
cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
efi/efivar_ssdt_load: Don't return success on allocation failure
clk: renesas: cpg-mssr: Fix inverted debug check
debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6
platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting
callbacks
hwmon: (scpi) Fix module autoload
hwmon: (amc6821) sign extension temperature
hwmon: (ds620) Fix overflows seen when writing temperature limits
hwmon: (nct7802) Fix overflows seen when writing into limit attributes
hwmon: (g762) Fix overflows and crash seen when writing limit attributes
hwmon: (lm90) fix temp1_max_alarm attribute
Input: synaptics-rmi4 - unlock on error
clk: qcom: ipq806x: Fix board clk rates
clk: clk-wm831x: fix a logic error
clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot
message
clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks
clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks
clk: imx31: fix rewritten input argument of mx31_clocks_init()
clk: renesas: mstp: Support 8-bit registers for r7s72100
iommu/amd: Missing error code in amd_iommu_init_device()
iommu/amd: Fix the left value check of cmd buffer
iommu/vt-d: Fix pasid table size encoding
iommu/vt-d: Flush old iommu caches for kdump when the device gets context mapped
ASoC: lpass-platform: initialize dma channel number
ASoC: cht_bsw_rt5645: Fix leftover kmalloc
ASoC: Intel: Skylake: Fix a shift wrapping bug
ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
scsi: g_NCR5380: Fix release_region in error handling
scsi: mvsas: fix command_active typo
target/iscsi: Fix double free in lio_target_tiqn_addtpg()
sbp-target: Fix second argument of percpu_ida_alloc()
relay: check array offset before using it
ima: fix memory leak in ima_release_policy
PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
genirq/affinity: Fix node generation from cpumask
mmc: mmc_test: Uninitialized return value
rpmsg: qcom_smd: Correct return value for O_NONBLOCK
mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
docs-rst: fix LaTeX DURole renewcommand with Sphinx 1.3+
mm: khugepaged: close use-after-free race during shmem collapsing
mm: khugepaged: fix radix tree node leak in shmem collapse error path
mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
s390/crypto: unlock on error in prng_tdes_read()
crypto: arm64/sha2-ce - fix for big endian
crypto: arm64/ghash-ce - fix for big endian
crypto: arm/aes-ce - fix for big endian
crypto: arm64/aes-ccm-ce: fix for big endian
crypto: arm64/aes-neon - fix for big endian
crypto: arm64/sha1-ce - fix for big endian
crypto: arm64/aes-xts-ce: fix for big endian
crypto: arm64/aes-ce - fix for big endian
md: MD_RECOVERY_NEEDED is set for mddev->recovery
md: fix refcount problem on mddev when stopping array.
f2fs: remove percpu_count due to performance regression
f2fs: hide a maybe-uninitialized warning
staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs()
PCI: rockchip: Fix negotiated lanes calculation
PCI: rockchip: Correct the use of FTS mask
PCI: Add Mellanox device IDs
PCI: Convert broken INTx masking quirks from HEADER to FINAL
PCI: Convert Mellanox broken INTx quirks to be for listed devices only
PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
powerpc/pci/rpadlpar: Fix device reference leaks
s390/topology: always use s390 specific sched_domain_topology_level
s390/pci: fix dma address calculation in map_sg
drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
drm/i915: disable PSR by default on HSW/BDW
drm/i915/gen9: unconditionally apply the memory bandwidth WA
drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
tpm_tis: Check return values from get_burstcount.
xfs: don't call xfs_sb_quota_from_disk twice
xfs: check return value of _trans_reserve_quota_nblks
xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
xfs: don't BUG() on mixed direct and mapped I/O
xfs: provide helper for counting extents from if_bytes
xfs: check minimum block size for CRC filesystems
xfs: fix unbalanced inode reclaim flush locking
xfs: new inode extent list lookup helpers
xfs: factor rmap btree size into the indlen calculations
xfs: always succeed when deduping zero bytes
xfs: remove prev argument to xfs_bmapi_reserve_delalloc
xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
xfs: clean up cow fork reservation and tag inodes correctly
xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
xfs: pass post-eof speculative prealloc blocks to bmapi
xfs: Move AGI buffer type setting to xfs_read_agi
xfs: pass state not whichfork to trace_xfs_extlist
xfs: handle cow fork in xfs_bmap_trace_exlist
xfs: forbid AG btrees with level == 0
xfs: check for bogus values in btree block headers
xfs: complain if we don't get nextents bmap records
xfs: don't crash if reading a directory results in an unexpected hole
xfs: error out if trying to add attrs and anextents > 0
xfs: don't allow di_size with high bit set
xfs: don't cap maximum dedupe request length
xfs: ignore leaf attr ichdr.count in verifier during log replay
xfs: use GPF_NOFS when allocating btree cursors
xfs: fix double-cleanup when CUI recovery fails
xfs: use the actual AG length when reserving blocks
xfs: fix crash and data corruption due to removal of busy COW extents
xfs: fix max_retries _show and _store functions
clocksource/dummy_timer: Move hotplug callback after the real timers
tick/broadcast: Prevent NULL pointer dereference
Revert "rtlwifi: Fix enter/exit power_save"
Revert "usb: gadget: composite: always set ep->mult to a sensible value"
usb: gadget: composite: always set ep->mult to a sensible value
Linux 4.9.3
** Affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Zesty)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Zesty)
Importance: Undecided
Status: New
** Description changed:
-
- SRU Justification
-
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The v4.9.3 upstream stable
- patch set is now available. It should be included in the Ubuntu
- kernel as well.
-
- git://git.kernel.org/
-
- TEST CASE: TBD
-
- The following patches from the v4.9.3 stable release shall be
+ SRU Justification
+
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The v4.9.3 upstream stable
+ patch set is now available. It should be included in the Ubuntu
+ kernel as well.
+
+ git://git.kernel.org/
+
+ TEST CASE: TBD
+
+ The following patches from the v4.9.3 stable release shall be
applied:
+
+ iio: common: st_sensors: fix channel data parsing
+ iio: max44000: correct value in illuminance_integration_time_available
+ iio: bmi160: Fix time needed to sleep after command execution
+ staging: octeon: Call SET_NETDEV_DEV()
+ ALSA: hda - Fix up GPIO for ASUS ROG Ranger
+ ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
+ ALSA: usb-audio: Fix irq/process data synchronization
+ fscrypt: fix renaming and linking special files
+ parisc: Add line-break when printing segfault info
+ parisc: Mark cr16 clocksource unstable on SMP systems
+ HID: sensor-hub: Move the memset to sensor_hub_get_feature()
+ ARM: davinci: da850: don't add emac clock to lookup table twice
+ pinctrl/amd: Set the level based on ACPI tables
+ mac80211: initialize fast-xmit 'info' later
+ asm-prototypes: Clear any CPP defines before declaring the functions
+ gcc-plugins: update gcc-common.h for gcc-7
+ drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
+ drm/i915: Fix oops in overlay due to frontbuffer tracking
+ drm/i915: Force VDD off on the new power seqeuencer before starting to use it
+ drm/i915: Initialize overlay->last_flip properly
+ KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
+ KVM: MIPS: Don't clobber CP0_Status.UX
+ KVM: MIPS: Flush KVM entry code from icache globally
+ usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
+ usb: musb: dsps: implement clear_ep_rxintr() callback
+ usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
+ usb: gadgetfs: restrict upper bound on device configuration size
+ USB: gadgetfs: fix unbounded memory allocation bug
+ USB: gadgetfs: fix use-after-free bug
+ USB: gadgetfs: fix checks of wTotalLength in config descriptors
+ USB: fix problems with duplicate endpoint addresses
+ USB: dummy-hcd: fix bug in stop_activity (handle ep0)
+ usb: gadget: composite: Test get_alt() presence instead of set_alt()
+ usb: dwc3: core: avoid Overflow events
+ usb: xhci: fix possible wild pointer
+ usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
+ xhci: free xhci virtual devices with leaf nodes first
+ usb: xhci: fix return value of xhci_setup_device()
+ usb: host: xhci: Fix possible wild pointer when handling abort command
+ xhci: Handle command completion and timeout race
+ usb: xhci: hold lock over xhci_abort_cmd_ring()
+ usb: return error code when platform_get_irq fails
+ USB: serial: omninet: fix NULL-derefs at open and disconnect
+ USB: serial: quatech2: fix sleep-while-atomic in close
+ USB: serial: pl2303: fix NULL-deref at open
+ USB: serial: keyspan_pda: verify endpoints at probe
+ USB: serial: spcp8x5: fix NULL-deref at open
+ USB: serial: io_ti: fix NULL-deref at open
+ USB: serial: io_ti: fix another NULL-deref at open
+ USB: serial: io_ti: fix I/O after disconnect
+ USB: serial: iuu_phoenix: fix NULL-deref at open
+ USB: serial: garmin_gps: fix memory leak on failed URB submit
+ USB: serial: ti_usb_3410_5052: fix NULL-deref at open
+ USB: serial: io_edgeport: fix NULL-deref at open
+ USB: serial: oti6858: fix NULL-deref at open
+ USB: serial: cyberjack: fix NULL-deref at open
+ USB: serial: kobil_sct: fix NULL-deref in write
+ USB: serial: mos7840: fix NULL-deref at open
+ USB: serial: mos7720: fix NULL-deref at open
+ USB: serial: mos7720: fix use-after-free on probe errors
+ USB: serial: mos7720: fix parport use-after-free on probe errors
+ USB: serial: mos7720: fix parallel probe
+ usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
+ xhci: Use delayed_work instead of timer for command timeout
+ xhci: Fix race related to abort operation
+ usb: dwc3: pci: add Intel Gemini Lake PCI ID
+ usb: dwc3: pci: Fix dr_mode misspelling
+ usb: dwc3: gadget: Fix full speed mode
+ usb: musb: Fix trying to free already-free IRQ 4
+ usb: hub: Move hub_port_disable() to fix warning if PM is disabled
+ usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
+ usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
+ ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
+ USB: serial: kl5kusb105: abort on open exception path
+ usb: gadget: Fix second argument of percpu_ida_alloc()
+ usb: gadget: fix request length error for isoc transfer
+ ARM: dts: r8a7794: Correct hsusb parent clock
+ USB: phy: am335x-control: fix device and of_node leaks
+ arm64: dts: hip06: Correct hardware pin number of usb node
+ ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support
+ dibusb: fix possible memory leak in dibusb_rc_query()
+ USB: serial: io_ti: bind to interface after fw download
+ mei: fix parameter rename KDoc
+ mei: bus: fix mei_cldev_enable KDoc
+ mei: move write cb to completion on credentials failures
+ staging: iio: ad7606: fix improper setting of oversampling pins
+ iio: accel: st_accel: fix LIS3LV02 reading and scaling
+ usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
+ usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
+ usb: dwc3: gadget: always unmap EP0 requests
+ drm/i915/dp: add lane_count check in intel_dp_check_link_status
+ drm/i915: tune down the fast link training vs boot fail
+ mac80211: fix tid_agg_rx NULL dereference
+ nl80211: Use different attrs for BSSID and random MAC addr in scan req
+ ath10k: fix failure to send NULL func frame for 10.4
+ mfd: tps65217: Fix page fault on unloading modules
+ ath10k: use the right length of "background"
+ cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
+ efi/efivar_ssdt_load: Don't return success on allocation failure
+ clk: renesas: cpg-mssr: Fix inverted debug check
+ debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
+ x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
+ x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6
+ platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting
callbacks
+ hwmon: (scpi) Fix module autoload
+ hwmon: (amc6821) sign extension temperature
+ hwmon: (ds620) Fix overflows seen when writing temperature limits
+ hwmon: (nct7802) Fix overflows seen when writing into limit attributes
+ hwmon: (g762) Fix overflows and crash seen when writing limit attributes
+ hwmon: (lm90) fix temp1_max_alarm attribute
+ Input: synaptics-rmi4 - unlock on error
+ clk: qcom: ipq806x: Fix board clk rates
+ clk: clk-wm831x: fix a logic error
+ clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot
message
+ clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks
+ clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks
+ clk: imx31: fix rewritten input argument of mx31_clocks_init()
+ clk: renesas: mstp: Support 8-bit registers for r7s72100
+ iommu/amd: Missing error code in amd_iommu_init_device()
+ iommu/amd: Fix the left value check of cmd buffer
+ iommu/vt-d: Fix pasid table size encoding
+ iommu/vt-d: Flush old iommu caches for kdump when the device gets context
mapped
+ ASoC: lpass-platform: initialize dma channel number
+ ASoC: cht_bsw_rt5645: Fix leftover kmalloc
+ ASoC: Intel: Skylake: Fix a shift wrapping bug
+ ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
+ scsi: g_NCR5380: Fix release_region in error handling
+ scsi: mvsas: fix command_active typo
+ target/iscsi: Fix double free in lio_target_tiqn_addtpg()
+ sbp-target: Fix second argument of percpu_ida_alloc()
+ relay: check array offset before using it
+ ima: fix memory leak in ima_release_policy
+ PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
+ irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
+ PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
+ genirq/affinity: Fix node generation from cpumask
+ mmc: mmc_test: Uninitialized return value
+ rpmsg: qcom_smd: Correct return value for O_NONBLOCK
+ mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
+ docs-rst: fix LaTeX DURole renewcommand with Sphinx 1.3+
+ mm: khugepaged: close use-after-free race during shmem collapsing
+ mm: khugepaged: fix radix tree node leak in shmem collapse error path
+ mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
+ s390/crypto: unlock on error in prng_tdes_read()
+ crypto: arm64/sha2-ce - fix for big endian
+ crypto: arm64/ghash-ce - fix for big endian
+ crypto: arm/aes-ce - fix for big endian
+ crypto: arm64/aes-ccm-ce: fix for big endian
+ crypto: arm64/aes-neon - fix for big endian
+ crypto: arm64/sha1-ce - fix for big endian
+ crypto: arm64/aes-xts-ce: fix for big endian
+ crypto: arm64/aes-ce - fix for big endian
+ md: MD_RECOVERY_NEEDED is set for mddev->recovery
+ md: fix refcount problem on mddev when stopping array.
+ f2fs: remove percpu_count due to performance regression
+ f2fs: hide a maybe-uninitialized warning
+ staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs()
+ PCI: rockchip: Fix negotiated lanes calculation
+ PCI: rockchip: Correct the use of FTS mask
+ PCI: Add Mellanox device IDs
+ PCI: Convert broken INTx masking quirks from HEADER to FINAL
+ PCI: Convert Mellanox broken INTx quirks to be for listed devices only
+ PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
+ PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
+ powerpc/pci/rpadlpar: Fix device reference leaks
+ s390/topology: always use s390 specific sched_domain_topology_level
+ s390/pci: fix dma address calculation in map_sg
+ drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
+ drm/i915: disable PSR by default on HSW/BDW
+ drm/i915/gen9: unconditionally apply the memory bandwidth WA
+ drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
+ tpm_tis: Check return values from get_burstcount.
+ xfs: don't call xfs_sb_quota_from_disk twice
+ xfs: check return value of _trans_reserve_quota_nblks
+ xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
+ xfs: don't BUG() on mixed direct and mapped I/O
+ xfs: provide helper for counting extents from if_bytes
+ xfs: check minimum block size for CRC filesystems
+ xfs: fix unbalanced inode reclaim flush locking
+ xfs: new inode extent list lookup helpers
+ xfs: factor rmap btree size into the indlen calculations
+ xfs: always succeed when deduping zero bytes
+ xfs: remove prev argument to xfs_bmapi_reserve_delalloc
+ xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
+ xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
+ xfs: clean up cow fork reservation and tag inodes correctly
+ xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
+ xfs: pass post-eof speculative prealloc blocks to bmapi
+ xfs: Move AGI buffer type setting to xfs_read_agi
+ xfs: pass state not whichfork to trace_xfs_extlist
+ xfs: handle cow fork in xfs_bmap_trace_exlist
+ xfs: forbid AG btrees with level == 0
+ xfs: check for bogus values in btree block headers
+ xfs: complain if we don't get nextents bmap records
+ xfs: don't crash if reading a directory results in an unexpected hole
+ xfs: error out if trying to add attrs and anextents > 0
+ xfs: don't allow di_size with high bit set
+ xfs: don't cap maximum dedupe request length
+ xfs: ignore leaf attr ichdr.count in verifier during log replay
+ xfs: use GPF_NOFS when allocating btree cursors
+ xfs: fix double-cleanup when CUI recovery fails
+ xfs: use the actual AG length when reserving blocks
+ xfs: fix crash and data corruption due to removal of busy COW extents
+ xfs: fix max_retries _show and _store functions
+ clocksource/dummy_timer: Move hotplug callback after the real timers
+ tick/broadcast: Prevent NULL pointer dereference
+ Revert "rtlwifi: Fix enter/exit power_save"
+ Revert "usb: gadget: composite: always set ep->mult to a sensible value"
+ usb: gadget: composite: always set ep->mult to a sensible value
+ Linux 4.9.3
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1655956
Title:
Zesty update to v4.9.3 stable release
Status in linux package in Ubuntu:
New
Status in linux source package in Zesty:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.9.3 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.9.3 stable release shall be
applied:
iio: common: st_sensors: fix channel data parsing
iio: max44000: correct value in illuminance_integration_time_available
iio: bmi160: Fix time needed to sleep after command execution
staging: octeon: Call SET_NETDEV_DEV()
ALSA: hda - Fix up GPIO for ASUS ROG Ranger
ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
ALSA: usb-audio: Fix irq/process data synchronization
fscrypt: fix renaming and linking special files
parisc: Add line-break when printing segfault info
parisc: Mark cr16 clocksource unstable on SMP systems
HID: sensor-hub: Move the memset to sensor_hub_get_feature()
ARM: davinci: da850: don't add emac clock to lookup table twice
pinctrl/amd: Set the level based on ACPI tables
mac80211: initialize fast-xmit 'info' later
asm-prototypes: Clear any CPP defines before declaring the functions
gcc-plugins: update gcc-common.h for gcc-7
drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
drm/i915: Fix oops in overlay due to frontbuffer tracking
drm/i915: Force VDD off on the new power seqeuencer before starting to use it
drm/i915: Initialize overlay->last_flip properly
KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
KVM: MIPS: Don't clobber CP0_Status.UX
KVM: MIPS: Flush KVM entry code from icache globally
usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
usb: musb: dsps: implement clear_ep_rxintr() callback
usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
usb: gadgetfs: restrict upper bound on device configuration size
USB: gadgetfs: fix unbounded memory allocation bug
USB: gadgetfs: fix use-after-free bug
USB: gadgetfs: fix checks of wTotalLength in config descriptors
USB: fix problems with duplicate endpoint addresses
USB: dummy-hcd: fix bug in stop_activity (handle ep0)
usb: gadget: composite: Test get_alt() presence instead of set_alt()
usb: dwc3: core: avoid Overflow events
usb: xhci: fix possible wild pointer
usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
xhci: free xhci virtual devices with leaf nodes first
usb: xhci: fix return value of xhci_setup_device()
usb: host: xhci: Fix possible wild pointer when handling abort command
xhci: Handle command completion and timeout race
usb: xhci: hold lock over xhci_abort_cmd_ring()
usb: return error code when platform_get_irq fails
USB: serial: omninet: fix NULL-derefs at open and disconnect
USB: serial: quatech2: fix sleep-while-atomic in close
USB: serial: pl2303: fix NULL-deref at open
USB: serial: keyspan_pda: verify endpoints at probe
USB: serial: spcp8x5: fix NULL-deref at open
USB: serial: io_ti: fix NULL-deref at open
USB: serial: io_ti: fix another NULL-deref at open
USB: serial: io_ti: fix I/O after disconnect
USB: serial: iuu_phoenix: fix NULL-deref at open
USB: serial: garmin_gps: fix memory leak on failed URB submit
USB: serial: ti_usb_3410_5052: fix NULL-deref at open
USB: serial: io_edgeport: fix NULL-deref at open
USB: serial: oti6858: fix NULL-deref at open
USB: serial: cyberjack: fix NULL-deref at open
USB: serial: kobil_sct: fix NULL-deref in write
USB: serial: mos7840: fix NULL-deref at open
USB: serial: mos7720: fix NULL-deref at open
USB: serial: mos7720: fix use-after-free on probe errors
USB: serial: mos7720: fix parport use-after-free on probe errors
USB: serial: mos7720: fix parallel probe
usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
xhci: Use delayed_work instead of timer for command timeout
xhci: Fix race related to abort operation
usb: dwc3: pci: add Intel Gemini Lake PCI ID
usb: dwc3: pci: Fix dr_mode misspelling
usb: dwc3: gadget: Fix full speed mode
usb: musb: Fix trying to free already-free IRQ 4
usb: hub: Move hub_port_disable() to fix warning if PM is disabled
usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
USB: serial: kl5kusb105: abort on open exception path
usb: gadget: Fix second argument of percpu_ida_alloc()
usb: gadget: fix request length error for isoc transfer
ARM: dts: r8a7794: Correct hsusb parent clock
USB: phy: am335x-control: fix device and of_node leaks
arm64: dts: hip06: Correct hardware pin number of usb node
ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support
dibusb: fix possible memory leak in dibusb_rc_query()
USB: serial: io_ti: bind to interface after fw download
mei: fix parameter rename KDoc
mei: bus: fix mei_cldev_enable KDoc
mei: move write cb to completion on credentials failures
staging: iio: ad7606: fix improper setting of oversampling pins
iio: accel: st_accel: fix LIS3LV02 reading and scaling
usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
usb: dwc3: gadget: always unmap EP0 requests
drm/i915/dp: add lane_count check in intel_dp_check_link_status
drm/i915: tune down the fast link training vs boot fail
mac80211: fix tid_agg_rx NULL dereference
nl80211: Use different attrs for BSSID and random MAC addr in scan req
ath10k: fix failure to send NULL func frame for 10.4
mfd: tps65217: Fix page fault on unloading modules
ath10k: use the right length of "background"
cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
efi/efivar_ssdt_load: Don't return success on allocation failure
clk: renesas: cpg-mssr: Fix inverted debug check
debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6
platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting
callbacks
hwmon: (scpi) Fix module autoload
hwmon: (amc6821) sign extension temperature
hwmon: (ds620) Fix overflows seen when writing temperature limits
hwmon: (nct7802) Fix overflows seen when writing into limit attributes
hwmon: (g762) Fix overflows and crash seen when writing limit attributes
hwmon: (lm90) fix temp1_max_alarm attribute
Input: synaptics-rmi4 - unlock on error
clk: qcom: ipq806x: Fix board clk rates
clk: clk-wm831x: fix a logic error
clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot
message
clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks
clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks
clk: imx31: fix rewritten input argument of mx31_clocks_init()
clk: renesas: mstp: Support 8-bit registers for r7s72100
iommu/amd: Missing error code in amd_iommu_init_device()
iommu/amd: Fix the left value check of cmd buffer
iommu/vt-d: Fix pasid table size encoding
iommu/vt-d: Flush old iommu caches for kdump when the device gets context
mapped
ASoC: lpass-platform: initialize dma channel number
ASoC: cht_bsw_rt5645: Fix leftover kmalloc
ASoC: Intel: Skylake: Fix a shift wrapping bug
ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
scsi: g_NCR5380: Fix release_region in error handling
scsi: mvsas: fix command_active typo
target/iscsi: Fix double free in lio_target_tiqn_addtpg()
sbp-target: Fix second argument of percpu_ida_alloc()
relay: check array offset before using it
ima: fix memory leak in ima_release_policy
PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
genirq/affinity: Fix node generation from cpumask
mmc: mmc_test: Uninitialized return value
rpmsg: qcom_smd: Correct return value for O_NONBLOCK
mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
docs-rst: fix LaTeX DURole renewcommand with Sphinx 1.3+
mm: khugepaged: close use-after-free race during shmem collapsing
mm: khugepaged: fix radix tree node leak in shmem collapse error path
mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
s390/crypto: unlock on error in prng_tdes_read()
crypto: arm64/sha2-ce - fix for big endian
crypto: arm64/ghash-ce - fix for big endian
crypto: arm/aes-ce - fix for big endian
crypto: arm64/aes-ccm-ce: fix for big endian
crypto: arm64/aes-neon - fix for big endian
crypto: arm64/sha1-ce - fix for big endian
crypto: arm64/aes-xts-ce: fix for big endian
crypto: arm64/aes-ce - fix for big endian
md: MD_RECOVERY_NEEDED is set for mddev->recovery
md: fix refcount problem on mddev when stopping array.
f2fs: remove percpu_count due to performance regression
f2fs: hide a maybe-uninitialized warning
staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs()
PCI: rockchip: Fix negotiated lanes calculation
PCI: rockchip: Correct the use of FTS mask
PCI: Add Mellanox device IDs
PCI: Convert broken INTx masking quirks from HEADER to FINAL
PCI: Convert Mellanox broken INTx quirks to be for listed devices only
PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
powerpc/pci/rpadlpar: Fix device reference leaks
s390/topology: always use s390 specific sched_domain_topology_level
s390/pci: fix dma address calculation in map_sg
drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
drm/i915: disable PSR by default on HSW/BDW
drm/i915/gen9: unconditionally apply the memory bandwidth WA
drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
tpm_tis: Check return values from get_burstcount.
xfs: don't call xfs_sb_quota_from_disk twice
xfs: check return value of _trans_reserve_quota_nblks
xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
xfs: don't BUG() on mixed direct and mapped I/O
xfs: provide helper for counting extents from if_bytes
xfs: check minimum block size for CRC filesystems
xfs: fix unbalanced inode reclaim flush locking
xfs: new inode extent list lookup helpers
xfs: factor rmap btree size into the indlen calculations
xfs: always succeed when deduping zero bytes
xfs: remove prev argument to xfs_bmapi_reserve_delalloc
xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
xfs: clean up cow fork reservation and tag inodes correctly
xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
xfs: pass post-eof speculative prealloc blocks to bmapi
xfs: Move AGI buffer type setting to xfs_read_agi
xfs: pass state not whichfork to trace_xfs_extlist
xfs: handle cow fork in xfs_bmap_trace_exlist
xfs: forbid AG btrees with level == 0
xfs: check for bogus values in btree block headers
xfs: complain if we don't get nextents bmap records
xfs: don't crash if reading a directory results in an unexpected hole
xfs: error out if trying to add attrs and anextents > 0
xfs: don't allow di_size with high bit set
xfs: don't cap maximum dedupe request length
xfs: ignore leaf attr ichdr.count in verifier during log replay
xfs: use GPF_NOFS when allocating btree cursors
xfs: fix double-cleanup when CUI recovery fails
xfs: use the actual AG length when reserving blocks
xfs: fix crash and data corruption due to removal of busy COW extents
xfs: fix max_retries _show and _store functions
clocksource/dummy_timer: Move hotplug callback after the real timers
tick/broadcast: Prevent NULL pointer dereference
Revert "rtlwifi: Fix enter/exit power_save"
Revert "usb: gadget: composite: always set ep->mult to a sensible value"
usb: gadget: composite: always set ep->mult to a sensible value
Linux 4.9.3
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1655956/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
